HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free and registered users see less advertising! If you just want to browse through the existing questions, just select the forum that you want to visit from the selection below. Otherwise, click here to register!. We highly recommend that you print a copy of our Guide for New Members. Enjoy!

Re:Filter SoBig worm at server

I am not sure if you can block by by subject or body from Sendmail.
Any chance you know of a good tutorial for block certain file extensions? I have been looking but I haven&#039; really found anything that suits my purposes.

Re:Filter SoBig worm at server

There&#039;s no one phrase in the subject or body of the SoBig mails that could unambiguously identify it as unwanted mail. Filtering for &quot;See the attached file for details&quot; could very well generate false positives as could filtering for the subject line this worm uses.

Your best bet is to run spamassassin. This is a very powerful spam filter that - provided you spend some time creating your set of rules - filters out most of your spam and viruses without generating false positives.

I do realize that this probably doesn&#039;t help you right away with the flood of SoBig mails you&#039;re getting at the moment but I really don&#039;t see any ad hoc method that would work reliably.